SH
Product
Shescape
by Shescape Project · last CVE Mar 11, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch

Add Shescape to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32094
6.5
0%
Mar 11
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Affected: before 2.1.10
CVE-2022-24725
5.5
0%
Mar 3
Shescape is a shell escape package for JavaScript
Affected: 1.4.0 before 1.5.1
CVE-2023-35931
4.3
1%
Jun 23
Shescape potential environment variable exposure on Windows with CMD
Affected: before 1.7.1
Showing 3